Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/54b01997-a013-36ac-b9ec-15c9c1ada58a.roa
File:                     54b01997-a013-36ac-b9ec-15c9c1ada58a.roa (raw, json)
Hash identifier:          rWetSDjMmd02+KsmYlZH/CLsYvLpZLy4KwdoR3W1uqY=
Subject key identifier:   F6:45:72:DE:2C:9E:0E:20:D9:16:0D:9C:C1:F7:AA:1B:C4:49:B2:89
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849E655043A123374AAC1747480
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/54b01997-a013-36ac-b9ec-15c9c1ada58a.roa
Signing time:             Mon 19 May 2025 01:00:48 +0000
ROA not before:           Mon 19 May 2025 01:00:48 +0000
ROA not after:            Sun 17 Aug 2025 01:00:48 +0000
asID:                     13335
IP address blocks:        162.158.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e6:55:04:3a:12:33:74:aa:c1:74:74:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 19 01:00:48 2025 GMT
            Not After : Aug 17 01:00:48 2025 GMT
        Subject: CN=34547f99-5e18-402f-8c2c-0f2dd8052c94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9f:3c:18:10:cb:f7:58:9a:b6:1c:77:be:f2:
                    d9:49:45:30:2b:0a:d4:c1:34:6d:46:17:07:78:50:
                    43:a4:8e:d4:85:a1:b8:25:f9:dd:b0:f5:ec:84:36:
                    d0:49:7d:b6:d3:df:f8:9d:e1:1a:e6:76:ff:d0:f1:
                    51:b3:3c:5f:e4:67:58:a6:9c:fd:14:97:d2:1a:60:
                    e1:1e:83:b2:62:9b:2b:6b:cd:3e:18:76:8b:db:91:
                    0c:08:e3:0f:66:72:b7:40:18:9d:ca:f1:b5:92:93:
                    86:34:af:57:7e:95:7d:55:81:c5:15:f0:48:21:10:
                    57:bc:05:64:c3:ae:9e:2d:31:6b:28:38:01:aa:c4:
                    80:c2:97:52:2c:8d:32:a3:8f:40:b5:5d:2c:bb:80:
                    f2:e3:b8:d0:fe:3a:be:eb:19:65:52:aa:66:cf:02:
                    2a:90:db:da:30:1d:34:7a:7b:ea:43:55:c1:01:92:
                    b6:80:9e:2e:be:71:90:76:d5:68:48:41:97:cc:76:
                    32:67:b0:09:5d:bd:07:47:f8:03:50:44:a2:a0:2a:
                    e6:41:87:68:f6:dc:fd:89:e3:07:5b:07:4d:6c:2c:
                    5b:0e:99:60:4b:9a:61:ea:58:e9:11:f8:95:eb:8f:
                    65:ba:11:e5:6d:81:84:fa:da:94:e8:6a:08:9d:34:
                    89:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:45:72:DE:2C:9E:0E:20:D9:16:0D:9C:C1:F7:AA:1B:C4:49:B2:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/54b01997-a013-36ac-b9ec-15c9c1ada58a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.171.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:7f:ac:d4:94:5c:43:30:86:a1:29:72:1b:2d:54:49:06:a8:
         5f:45:b1:0c:1a:b3:73:f7:5d:c2:ee:cb:5e:28:3e:f6:e0:0d:
         0e:b6:f8:65:a6:3c:ec:73:07:2d:2e:8a:71:7b:78:4e:56:72:
         f5:27:7f:71:1c:09:e8:89:b3:1b:31:89:cd:01:45:a6:dd:68:
         33:b1:ad:6a:73:4a:97:d3:67:98:d3:7a:37:8e:a1:5c:9c:4e:
         2d:f1:91:82:de:da:b5:a5:3e:bd:60:ef:c1:08:97:50:ff:b8:
         08:00:db:85:83:ae:72:5b:5e:93:ae:89:bf:25:28:d3:70:11:
         4f:6d:81:eb:28:39:a1:47:af:47:d6:5c:6b:83:05:0c:25:d9:
         79:fd:a1:6d:f0:5e:ff:67:2e:64:76:f2:38:6c:3c:5e:7d:d3:
         20:fb:87:c2:6b:76:1e:50:76:4d:e4:c7:27:20:87:67:06:8b:
         d9:0f:86:7c:41:48:87:ec:e5:73:23:70:7c:4f:77:dc:cb:1c:
         d9:38:df:67:1e:c9:f0:17:c7:97:86:ed:b2:ad:03:60:dd:be:
         de:02:e4:6a:1b:a7:8c:ca:21:59:db:58:f4:80:a7:c5:a3:fa:
         ad:9f:c8:f3:c7:d2:38:eb:89:a9:49:47:03:8b:1d:82:cc:f6:
         4d:61:98:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 19:50:11 2025 by rpki-client